Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
File:                     vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json)
Hash identifier:          7LZ1DY5UrzNj1BinyundILwGJ2J0f+22Utxlsj3AwK8=
Subject key identifier:   EC:AC:35:7C:E5:7F:56:EF:C0:E6:00:28:96:CD:25:A8:02:3A:A3:C0
Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
Certificate issuer:       /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Certificate serial:       0D70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
Manifest number:          0D65
Signing time:             Thu 08 Oct 2026 18:07:08 +0000
Manifest this update:     Thu 08 Oct 2026 18:07:08 +0000
Manifest next update:     Thu 15 Oct 2026 18:07:08 +0000
Files and hashes:         1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: T9Kebqk+T95mEAvWjFqQPcITUmroir/yluLDvz6CKh4=)
                          2: 8325B5147FE911F09A568E85C4F9AE02.roa (hash: SEF/lx3q5Pq/2u0T3UwtlNSUgGkL6u5d5TOpErwQ7Qs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
                          rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 18:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3440 (0xd70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
        Validity
            Not Before: Oct  8 18:07:08 2026 GMT
            Not After : Oct 15 18:07:08 2026 GMT
        Subject: CN=6ac7dbcc-f810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:bd:f3:a7:e0:e4:b8:4a:46:46:b6:01:13:
                    ab:41:ba:fa:07:36:5d:47:a6:69:4f:91:0b:a4:d9:
                    04:eb:0a:c2:5c:0a:a0:98:bc:b4:63:a6:a8:5f:e9:
                    c3:4c:81:19:ae:86:be:b7:a9:27:74:45:9a:6d:97:
                    3b:6b:cb:a6:a9:7f:10:a2:b1:a2:53:64:a5:2e:fc:
                    06:e0:cd:27:57:86:db:8a:02:c9:e3:be:43:2e:6b:
                    62:d4:f5:ef:96:01:20:e1:14:a1:ac:7d:2f:23:51:
                    50:0c:76:8c:ee:4e:e4:a7:fb:06:3b:99:16:d1:3b:
                    d5:01:f5:fa:6a:7b:93:41:7d:96:3e:9a:03:be:bf:
                    a7:12:f7:38:b2:69:d2:22:e4:9b:e8:28:a6:15:aa:
                    e2:ae:95:78:75:0a:33:ae:59:c4:22:76:ea:83:3b:
                    7a:10:07:6a:96:27:c1:7d:8a:dc:71:a9:07:9e:4f:
                    42:db:25:06:2d:33:9e:3d:a9:65:07:b8:5e:e4:27:
                    b0:c1:e0:db:9e:fe:54:99:db:74:3a:89:10:88:35:
                    da:ff:8c:41:ef:ab:a1:e3:d3:e9:0f:cd:ff:fd:2b:
                    06:df:ff:a8:c4:3e:5b:28:20:b3:37:86:2e:7e:7e:
                    c1:24:69:b4:aa:d5:e2:f0:f0:91:de:c8:f7:7b:97:
                    a2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AC:35:7C:E5:7F:56:EF:C0:E6:00:28:96:CD:25:A8:02:3A:A3:C0
            X509v3 Authority Key Identifier:
                keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:20:09:76:78:e3:f9:58:ae:59:47:57:f9:f9:67:b4:5a:8e:
         d0:b3:6d:bf:0b:25:00:39:9e:e5:11:0b:f1:2c:67:78:99:94:
         3c:4c:3a:ce:aa:59:dd:8d:9f:dd:fb:eb:f2:44:fa:02:6b:80:
         cb:f0:94:3a:da:f6:9b:be:ec:9a:ed:37:da:5e:f2:96:08:87:
         1f:92:50:87:90:52:e4:ad:14:c4:de:2f:20:5a:9a:d5:16:88:
         d6:cc:32:41:dd:7f:59:93:d6:bd:66:cf:5f:71:31:0b:a7:3b:
         7d:e6:e0:17:fb:e2:30:21:09:a3:d8:af:06:75:8d:7e:f2:41:
         2f:56:b1:c3:8b:e0:af:f0:47:5c:df:fd:9f:c5:25:96:c1:2d:
         9c:54:52:2b:c7:83:c4:1a:cf:b9:4d:2d:b5:4e:9d:8f:40:47:
         71:6e:3e:a6:44:d7:28:12:89:1e:65:3e:06:f9:dc:79:45:12:
         a7:b7:39:19:28:0f:cf:f0:80:5c:8b:34:40:e6:93:c4:d4:00:
         05:8f:03:a4:8a:9f:2e:a8:d7:2d:ee:14:2e:f3:56:90:1c:3b:
         a6:55:5a:93:3f:a8:da:6f:0c:18:7e:e1:b0:d9:3f:9e:ca:1a:
         31:bd:26:7d:76:54:94:3c:b7:7d:24:40:71:1f:c8:b5:44:d7:
         61:c7:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:45:09 2026 by rpki-client